<!doctype html>
<title>Sandboxed Cross-Origin-Opener-Policy popup should result in a network error</title>
<script src=/resources/testharness.js></script>
<script src=/resources/testharnessreport.js></script>
<script src="/common/utils.js"></script> <!-- Use token() to allow running tests in parallel -->
<div id=log>
<script>
[
  "allow-popups allow-scripts allow-same-origin",
  "allow-popups allow-scripts",
].forEach(sandboxValue => {
  async_test(t => {
    const frame = document.createElement("iframe");
    const channel = new BroadcastChannel(token());
    channel.onmessage = t.unreached_func("A COOP popup was created from a sandboxed frame");
    t.add_cleanup(() => frame.remove());
    frame.sandbox = sandboxValue;
    frame.srcdoc = `<script>
  const popup = window.open("resources/coop-coep.py?coop=same-origin&coep=&channel=${channel.name}");
  <\/script>`;
    document.body.append(frame);
    addEventListener('load', t.step_func(() => {
      // This uses a timeout to give some time for incorrect implementations to broadcast. A
      // theoretical testdriver.js API for browsing contexts could be used to speed this up.
      t.step_timeout(() => {
        t.done()
      }, 1500);
    }));
  }, `<iframe sandbox="${sandboxValue}"> ${document.title}`);
});

// Verify that the popup does not have sandboxing flags set
async_test(t => {
  const frame = document.createElement("iframe");
  const channel = new BroadcastChannel(token());
  channel.onmessage = t.step_func_done();
  t.add_cleanup(() => frame.remove());
  frame.sandbox = "allow-popups allow-scripts allow-popups-to-escape-sandbox";
  frame.srcdoc = `<script>
window.open("resources/coop-coep.py?coop=same-origin&coep=require-corp&channel=${channel.name}");
<\/script>`;
  document.body.append(frame);
}, `<iframe sandbox="allow-popups allow-scripts allow-popups-to-escape-sandbox"> ${document.title}`);

async_test(t => {
  const frame = document.createElement("iframe");
  const channel = new BroadcastChannel(token());
  frame.sandbox = "allow-scripts allow-same-origin";
  frame.name = `iframe-${channel.name}`;
  frame.src = `resources/coop-coep.py?coop=same-origin&coep=require-corp&channel=${channel.name}`;
  channel.onmessage = t.step_func( event => {
    const payload = event.data;
    assert_equals(payload.name, frame.name, "name");
    t.done();
  });
  t.add_cleanup(() => frame.remove());
  document.body.append(frame);
}, `Iframe with sandbox and COOP must load.`);
</script>
